Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
File: AS131727.roa (raw, json)
Hash identifier: BXrFG/WHYBmYQAA0E3qEIRMLdTqB9PvtRPYTjA1xvfE=
Subject key identifier: AA:84:98:E5:96:F3:11:F0:0F:CB:63:22:0A:98:32:FE:41:F3:4F:A9
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0EC02E37FB9F1DC9BC440AED3A875904A600BD52
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
Signing time: Tue 10 Dec 2024 04:00:00 +0000
ROA not before: Tue 10 Dec 2024 03:55:00 +0000
ROA not after: Tue 09 Dec 2025 04:00:00 +0000
asID: 131727
IP address blocks: 103.134.66.0/23 maxlen: 24
2001:df7:bd00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c0:2e:37:fb:9f:1d:c9:bc:44:0a:ed:3a:87:59:04:a6:00:bd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 10 03:55:00 2024 GMT
Not After : Dec 9 04:00:00 2025 GMT
Subject: CN=AA8498E596F311F00FCB63220A9832FE41F34FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:1a:e2:cc:17:03:aa:0d:3d:8a:40:11:7a:
b5:ed:54:75:75:57:c5:dc:5b:e2:79:42:6c:5a:5b:
62:39:64:98:24:21:67:77:a3:99:d1:8a:9e:56:91:
d0:8d:65:d0:11:c8:fc:a2:ec:0e:20:43:79:5b:dc:
c0:fb:2a:1c:1e:1a:28:d9:16:63:e5:7d:37:e6:57:
10:93:50:a3:0f:d9:b0:16:74:36:1d:69:e4:87:08:
a1:4e:75:db:0b:bf:1f:08:9a:2e:d1:79:fb:d2:0a:
7e:84:3c:3f:02:5b:ba:22:d9:e1:1f:d4:13:f9:02:
c3:4b:89:f4:4c:17:4c:f2:1f:d2:68:9e:80:6a:f9:
15:47:a5:26:2e:6c:64:ff:8a:39:2a:de:da:13:4f:
18:dd:6e:1d:e5:8b:07:03:83:96:91:43:3d:f1:fc:
fb:c5:ea:e3:50:64:98:22:88:aa:c1:04:0a:f0:8d:
2d:84:0d:d5:5b:c4:86:93:5a:74:44:d7:9d:56:58:
9a:f2:bb:94:03:8f:5d:5a:2e:cb:c5:b7:53:41:71:
ea:ef:4b:42:0c:58:87:05:06:ec:29:0c:72:b7:01:
b8:9b:88:59:da:2f:a3:44:3b:40:d4:80:7f:ec:15:
ca:53:dc:a5:88:82:87:6a:7a:05:62:f7:22:b8:08:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:98:E5:96:F3:11:F0:0F:CB:63:22:0A:98:32:FE:41:F3:4F:A9
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.134.66.0/23
IPv6:
2001:df7:bd00::/48
Signature Algorithm: sha256WithRSAEncryption
08:bb:d4:c2:c4:b4:a1:77:0e:6b:18:5d:a8:56:03:6a:10:03:
44:6f:57:85:38:6a:24:d6:c7:40:7d:88:7f:60:89:1b:29:d3:
97:f9:52:38:15:42:98:03:27:ce:f2:d0:15:2c:32:96:b6:54:
e2:b6:97:50:3d:f1:d1:8a:14:5d:aa:ba:f6:b7:66:b3:f1:08:
d9:b5:f3:a7:fa:85:ac:f4:8e:51:c1:8c:33:4a:dc:6c:46:03:
88:24:28:5e:aa:b6:f7:0b:28:ad:3b:65:c8:e8:10:6d:63:f2:
d0:05:1e:aa:aa:84:2c:5a:77:6a:41:76:ab:0c:07:db:5a:9f:
1f:94:e2:8a:69:6f:9b:0a:6f:ba:8b:16:98:36:e7:83:9e:b8:
fd:a0:f5:4b:5e:a2:0c:3d:ae:8c:7f:a0:05:96:cc:7e:64:f4:
5b:2c:33:51:84:d1:61:92:f6:4d:ef:98:33:d8:f5:8e:03:30:
b9:ed:af:be:aa:75:a3:81:73:56:b1:97:99:b8:21:f0:2a:0c:
ff:4e:e3:0a:d0:a7:ff:b2:09:fe:29:78:56:9b:05:d9:dc:aa:
c4:eb:cc:ff:0f:af:c7:75:0c:77:40:1a:58:f4:1c:f6:f2:1b:
45:02:49:6b:eb:37:92:c4:a8:ba:e8:c6:a4:bf:3d:ad:16:09:
f4:7e:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:14 2025 by rpki-client